====================================================================

                                 CERT-Renater

                       Note d'Information No. 2012/VULN174
____________________________________________________________________

DATE                : 11/04/2012

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S) : Systems running Microsoft .NET Framework
                                     versions 1, 2, 3, 4.

======================================================================
KB2671605
http://technet.microsoft.com/en-us/security/bulletin/ms12-025
______________________________________________________________________

Microsoft Security Bulletin MS12-025 - Critical Vulnerability in .NET
Framework Could Allow Remote Code Execution (2671605)

Published Date: April 10, 2012

Version: 1.0

General Information
3
Executive Summary

This security update resolves one privately reported vulnerability in Microsoft
.NET Framework. The vulnerability could allow remote code execution on a client
system if a user views a specially crafted webpage using a web browser that can
run XAML Browser Applications (XBAPs). Users whose accounts are configured to
have fewer user rights on the system could be less impacted than users who
operate with administrative user rights. The vulnerability could also allow
remote code execution on a server system running IIS, if that server allows
processing ASP.NET pages and an attacker succeeds in uploading a specially
crafted ASP.NET page to that server and then executes the page, as could be the
case in a web hosting scenario. This vulnerability could also be used by Windows
.NET applications to bypass Code Access Security (CAS) restrictions. In a web
browsing attack scenario, an attacker could host a website that contains a
webpage that is used to exploit this vulnerability. In addition, compromised
websites and websites that accept or host user-provided content or
advertisements could contain specially crafted content that could exploit this
vulnerability. In all cases, however, an attacker would have no way to force
users to visit these websites. Instead, an attacker would have to convince users
to visit the website, typically by getting them to click a link in an email
message or Instant Messenger message that takes users to the attacker's website.

This security update is rated Critical for Microsoft .NET Framework 1.0 Service
Pack 3, Microsoft .NET Framework 1.1 Service Pack 1, Microsoft .NET Framework
2.0 Service Pack 2, Microsoft .NET Framework 3.5.1, and Microsoft .NET Framework
4 on all supported editions of Microsoft Windows.

Affected Software
Microsoft .NET Framework 1.0 Service Pack 3
   (XP Media Center Edition 2005 and Tablet PC Edition 2005 only)
Microsoft .NET Framework 1.1 Service Pack 1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 4
Microsoft .NET Framework 3.5.1

Vulnerability Information

.NET Framework Parameter Validation Vulnerability - CVE-2012-0163

A remote code execution vulnerability exists in the way that Microsoft .NET
Framework validates parameters when passing data to a function. An attacker who
successfully exploited this vulnerability could take complete control of an
affected system. An attacker could then install programs; view, change, or
delete data; or create new accounts with full user rights. Users whose accounts
are configured to have fewer user rights on the system could be less impacted
than users who operate with administrative user rights.

======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
=========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44          +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
+ 75013 Paris           | email: certsvp@renater.fr     +
=========================================================